Cyberattack Erases Data Across Beget’s Cloud Infrastructure, Disrupting Hundreds of Russian Websites
What Happened — On the night of Sunday, an attacker breached the internal management systems of Beget, one of Russia’s largest domain registrars and cloud‑hosting providers. Using the privileged access, the threat actor ran scripts that deliberately deleted data stored in the company’s cloud platform—including virtual‑private‑server (VPS) images, cloud storage objects, and Kubernetes workloads. Binary backups of the virtual servers were also destroyed, leaving only file‑level backups as a possible recovery source. More than 1,000 servers now require manual inspection before they can be brought back online, and the provider is still working to restore services for hundreds of affected websites, ranging from small businesses to government portals.
Why It Matters for Trust & Control Assurance — The incident highlights the critical need for robust privileged‑account controls and continuous monitoring of administrative actions.
Who Is Affected — Cloud‑hosting customers in Russia across sectors such as small‑business services, municipal government, research institutions, and any organization that relied on Beget’s shared‑hosting or VPS offerings.
Recommended Actions
- Review and tighten privileged‑access policies; enforce least‑privilege and multi‑factor authentication for infrastructure‑management accounts.
- Implement immutable logging and real‑time alerting on privileged actions to detect unauthorized scripts.
- Verify backup strategies include air‑gapped or immutable copies that cannot be erased by the same credentials.
- Conduct a tabletop exercise of a data‑destruction scenario to test incident‑response playbooks.
Technical Notes
- Attack vector: Stolen or compromised privileged credentials used to access internal management consoles.
- Data impact: Complete loss of cloud‑service data (VPS images, storage objects, Kubernetes configs); binary backups destroyed, file‑level backups partially intact.
- Systems affected: Beget’s cloud infrastructure, shared‑hosting environment, VPS, Kubernetes services.